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Data-processing device and method of operating said device 



The invention relates to a method of generating a random-number sequence 
particularly in a chip card or smart card, as defined in the pre-characterizing part of claim 1. 
The invention also relates to a random-number generator, particularly for a chip card or a 
smart card, as defined in the pre-characterizing part of claim 11. 

5 

In many data-processing devices with integrated circuits, for example, 
cryptographic operations serve to protect the operation of these devices or to protect data 
transported in these devices. The computing operations required for this purpose are 

10 performed by standard processing units (CPU) and by dedicated crypto-processing units (co- 
processors). Typical examples are chip cards or IC cards such as, for example, smart cards. 
The data or intermediate results used in this respect is generally security-relevant information 
such as, for example, cryptographic keys or operands. 

Data-processing devices such as, for example, the above-mentioned smart card 

15 performing cryptographic operations require an integrated or "on-chip" random-number 
generator. 

A digital random-number generator is known from US 4,799,259, in which a 
plurality of frequency oscillators is connected to an Exclusive-OR network (XOR). This 
XOR network supplies a random signal from its output, which signal is applied to a flip-flop. 

20 At each clock signal, the flip-flop scans the output of the XOR network and stores a 

corresponding value or supplies it from its output. Both the frequency oscillators and the flip- 
flop are clocked by one and the same signal source. For generating a sequence of random 
numbers, this clock signal is therefore derived from a digital noise clock signal source. 
However, this is particularly elaborate and cost-intensive when the generation of random 

25 numbers is to be integrated on a chip. 

A random-number generator having a plurality of high-frequency ring 
oscillators and a voltage-controlled low-frequency oscillator receiving a noise signal as input 
signal is known from WO 97/4370. Dependent on the output signal of the voltage-controlled 
low-frequency oscillator, the high-frequency ring oscillators are scanned. To this end, each 
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frequency oscillator precedes a flip-flop controlled by the clock of the low-frequency 
oscillator, ensuring that the generated random numbers of corresponding zeroes and ones 
occur with the same probability or at the same frequency. 

5 

It is an object of the invention to provide an improved method and an 
improved random generator of the type described above, which eliminate the above- 
mentioned drawbacks and allow independent "on-chip" generation of random numbers. 

This object is solved by means of a method of the type described above and as 
10 defined in the characterizing part of claim 1 and by means of a random-number generator of 
the type described above and as defined in the characterizing part of claim 11. 

According to the invention, a method of the type described above comprises 

the steps of 

(a) scanning the outputs of Nosz independent frequency oscillators and 
15 buffering corresponding Nosz output signals of the Nosz frequency oscillators at each clock 

of a clock signal from an external clock signal source, 

(b) applying the buffered signals of step (a) to a logic operation assigning 
a predetermined output value to the Nosz buffered signals as input values, 

(c) generating the parity of a predetermined number Niog of output 
20 values of step (b) at each Nlog* clock of the external clock signal, 

(d) storing a predetermined number Nz of parity numbers in a random- 
number register, and 

(e) reading all of the Nz*Nlog clocks of the clock signal as a random 
number from the random-number register. 

25 This has the advantage that an independent random-number sequence is 

available in a simple and low-cost manner, which can be essentially produced "on-chip" and 
only requires an external clock signal. 

Advantageous further embodiments of the method are defined in claims 2 to 

10. 

30 To achieve a possibly equally high probability of the random numbers in the 

random-number sequence, the frequency of at least one frequency oscillator is changed 
and/or modulated in dependence upon an MSB (Most Significant Bit) of a signature register, 
while, for example, the frequency of the changed or modulated frequency oscillator is 
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switched between > 20 MHz and > 40 MHz in dependence upon the MSB of the signature 
register. 

In a preferred embodiment, the frequency of at least one frequency oscillator is 
selected to be > 30 MHz, and the frequency oscillators are voltage-controlled or current- 
5 controlled. In step (a), the output signals of the two frequency oscillators are buffered, for 
example, in a respective flip-flop, particularly a delay flip-flop (D-F/F). The number Nosz is, 
for example, an integer which is larger than or equal to 1, particularly Nosz = 2, and the 
numbers Nlog and Nz are suitably integers which are larger than or equal to 1. 

Suitably, in step (c) the logic operation is an AND operation (AND), an OR 
10 operation (OR), a NOR operation (NOR), an Exclusive-OR operation (XOR), a NAND 
operation (NAND) or an Exclusive-NOR operation (XNOR). 

To avoid returning samples in the random-number sequence, the frequencies 
of the Nosz frequency oscillators are selected to be such that no frequency of a frequency 
oscillator is an integral multiple of another frequency oscillator or of the external clock 
15 signal. 

Furthermore, a random-number generator according to the invention 

comprises: 

- a predetermined number Nosz of mutually independent frequency oscillators, 

- a predetermined number Nosz of flip-flops, in which an output of a 
20 frequency oscillator is connected to an input D of a flip-flop, 

- a logic circuit element receiving outputs Q of the flip-flops as input values 
and, in accordance with a predetermined logic operation, assigns an output value to these 
input values, 

- a parity circuit determining the parity of a predetermined number Nlog of 
25 output values from the logic circuit element, 

- a random-number register which buffers a predetermined number Nz of 
parity numbers from the parity circuit and supplies them as Nz bit random number, and 

- an input for an external clock signal source which clocks the flip-flops, the 
parity circuit and the random-number register. 

30 This has the advantage that, for generating a random number sequence, a 

simple and low-cost random-number generator is available which can be integrated in a 
simple and low-cost manner on a chip and only requires a simple external clock signal. 

Advantageous further embodiments of the random-number generator are 
defined in claims 12 to 20. 
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To achieve a possibly equally high probability of the random numbers in the 
random-number sequence, at least a frequency oscillator is connected to an output of a 
signature register which applies an MSB (Most Significant Bit) to the frequency oscillator, 
while the frequency oscillator connected to the signature register is formed, for example, in 
5 such a way that it switches its frequency between > 20 MHz and > 40 MHz in dependence 
upon the MSB of the signature register. 

In a preferred embodiment, the frequency of at least one frequency oscillator is 
> 30 MHz, and the frequency oscillators are formed as voltage-controlled or current- 
controlled frequency oscillators. At least one flip-flop is formed as a delay flip-flop (D-F/F). 
10 Nosz is, for example, an integer which is larger than or equal to 1, particularly, Nosz = 2, and 
Nlog as well as Nz are suitably integers which are larger than or equal to 1. 

Suitably, the logic circuit element is an AND element (AND), an OR element 
(OR), a NOR element (NOR), an Exclusive-OR element (XOR), a NAND element (NAND) 
or an Exclusive-NOR element (XNOR). 
15 To avoid a returning sample in the random-number sequence, the Nosz 

frequency oscillators are formed in such a way that no frequency of a frequency oscillator is 
an integral multiple of another frequency oscillator or of the external clock signal. 

These and other aspects of the invention are apparent from and will be 
elucidated with reference to the embodiments described hereinafter. 



In the drawing: 

The sole Figure is a block diagram of a preferred embodiment of a random- 
number generator according to the invention. 

25 



The preferred embodiment shown in the sole Figure of a random-number 
generator according to the invention comprises two frequency oscillators 10 (OSCl) and 12 
(OSC2), two flip-flops 14 (LATCHl) and 16 (LATCH2) of the delay flip-flop type (D-F/F), 
30 a logic circuit element 18 (XNOR) performing an Exclusive-NOR operation (XNOR), a 
parity generator 20 (PARITY) and a random-number register 22 (REG). 

The frequency oscillators 10, 12 have a reset input RES 24 and an output OUT 
26. The frequency oscillator 10 (OSCl) in the upper part of the Figure also has an input 
MOD 28 which is connected to an output of a signature register (not shown). It supplies to 
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the frequency oscillator 10 consecutive MSB (Most Significant Bit) of the signature register 
in a bit stream (SIGMSB 29) and thereby varies an operating frequency of the frequency 
oscillator 10 (OSCl). 

The flip-flops 14, 16 have an input D 30 connected to an output OUT 26 of a 

5 frequency oscillator 10, 12, an output Q 32, a clock input CL 34 and a reset input RES 35. 
The logic circuit element 18 has two inputs A 36 and B 38 connected to the output Q 32, as 
well as an output OUT 40. The parity generator 20 has an input IN 42 connected to the output 
OUT 40 of the logic circuit element 18, an output OUT 44 and a clock input CL 46. The 
random-number register 22 has an input IN 48 connected to the output OUT 44 of the parity 

10 generator 20, an output OUT 50 and a clock input CL 52. The output OUT 50 of the random- 
number generator is connected to a data bus 54. 

An external reset signal 56 (RESET) is applied, if necessary, to the respective 
inputs RES 24 of the frequency oscillators 10, 12 and to the inputs RES 35 of the flip-flops 
14, 16. An external clock signal 58 (EXTCLK) is applied to the clock inputs 34, 36 and 52 of 

15 flip-flops 14 and 16, parity generator 20 and random-number register 22. Reset inputs RES 
60 of parity generator 20 and random-number register 22 are also connected to the external 
reset signal 56 (RESET). 

The frequency oscillators 10, 12 are formed as "on-chip" frequency oscillators, 
i.e. they are integrated on a chip, and as current-controlled oscillators (CCO). They are 

20 therefore not influenced by an input or operating voltage. The frequency oscillator 12 (OSC2) 
in the lower part of the Figure generates a frequency > 30 MHz, while the frequency 
oscillator 10 (OSCl) in the upper part of the Figure switches its frequency between > 20 
MHz and > 40 MHz in dependence upon the continuous bit stream of the signature register 
(SIGMSB 29). The frequencies of the frequency oscillators 10, 12 are chosen to be such that 

25 they are not mutually integral multiples of each other and are neither integral multiples of the 
external clock frequency 58. 

The mode of operation of the random-number generator according to the 
invention will hereinafter be described with reference to the sole Figure. 

At each clock signal 58, the outputs OUT 26 of the frequency oscillators 10, 

30 12 are scanned and buffered in the flip-flops 14, 16. The signal available at the output Q of 
the flip-flops 14, 16 is thus a quasi-" frozen" or held signal of the associated frequency 
oscillator at the instant of the last clock signal 58. The output signals of the outputs Q 32 of 
the flip-flops 14, 16 are applied to the inputs A 36 and B 38 of the logic circuit element 18 
and subjected to an XNOR operation (Exclusive-NOR). As a result, the XNOR operation 
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assigns one output signal at the output OUT 40 of the logic circuit element 18 to two input 
signals at the inputs A 36 and B 38. This result of the XNOR operation is apphed to the input 
IN 42 of the parity generator 20. This generator is formed in such a way that it determines, in 
accordance with a predetermined number Nlog of clock signals, a parity of the last received 

5 Nlog results of XNOR operations and transmits it to the random-number register 22 which is 
formed as an Nz bit register, i.e. it stores Nz consecutive bits from the parity generator 20 to 
form a new random number. The read frequency of the random-number register 22 is thus the 
product Nlog*Nz. In other words, all of the Nlog*Nz clocks of the clock signal 58 are read 
from the random-number register 22 and it applies a new random number to the data bus 54. 

10 Each random number is available in a binary form as a sequence of zeroes and ones so that 
the random-number generator shown is a digital random-number generator. 

Each random number Z applied to the data bus 54 is thus formed in 
accordance with Z = [bit_l, bit_2, bit_3, ... , bit_Nz] from Nz bits, in which each bit is a 
parity of Nlog XNOR operations of output values f_nosz (nosz = 1, Nosz) of the Nosz 

15 frequency oscillators in accordance with bit_nz = PARITY_nz[ XNOR_l(f_l, .. f_Nosz), ... , 
XNOR_Nlog(f_l, f_Nosz) ]with nz = 1, ... ,Nz 

It will be evident that the embodiment using two frequency oscillators 10, 12 
is shown only by way of example. Alternatively, three, four or more frequency oscillators 
may be provided. A corresponding number of flip-flops 14, 16 as well as inputs at logic 

20 circuit elements 1 8 is then provided. In a further alternative embodiment, the collection of the 
Nz bits is performed in parallel, in which the arrangement in accordance with the sole Figure 
is provided Nz times and the random-number register 22 buffers only one bit. Each of these 
arrangements then parallel supplies one bit of the random number Z with a different valence. 
This has the advantage that the time between two new random numbers is shorter with 

25 respect to the Nlog clocks of the clock signal 58 for parity formation. 



